@agimon-ai/po-workflow 0.0.0-alpha.105 → 0.0.0-alpha.107

package/dist/{RecoverWorkflowService-CFiF9ZBU.cjs → RecoverWorkflowService-2WMhxaZd.cjs}

@@ -4501,7 +4501,6 @@ const INTERRUPT_SIGNAL$2 = "SIGINT";
 const HANGUP_SIGNAL$1 = "SIGHUP";
 const TERMINATE_SIGNAL$1 = "SIGTERM";
 const DEFAULT_STEP_NAME = "unnamed";
-const DEFAULT_SHELL = "/bin/zsh";
 const FORCE_COLOR_KEY = "FORCE_COLOR";
 const FORCE_COLOR_VALUE = "1";
 const PROJECT_PATH_ENV_KEY = "PROJECT_PATH";
@@ -4670,7 +4669,7 @@ function secretRedactor(values) {
 *
 * Runtime configuration:
 * - Environment precedence is `runtime.baseEnvironment` -> workflow/job env -> step env.
-* - Child commands run through `/bin/zsh` to match local workflow execution.
+* - Child commands use the host-selected shell, matching workflow panes and services.
 * - `FORCE_COLOR=1` is injected so tool output keeps ANSI formatting.
 */
 var StepRunnerService = class StepRunnerService {
@@ -5320,7 +5319,7 @@ var StepRunnerService = class StepRunnerService {
 					...stepEnv,
 					[FORCE_COLOR_KEY]: FORCE_COLOR_VALUE
 				},
-				shell: DEFAULT_SHELL
+				shell: this.runtime.workflowHost.shellPath
 			}) : this.runtime.workflowHost.spawn(command, [], {
 				stdio: [
 					this.ownsTerminal ? STDIO_INHERIT : STDIO_IGNORE,
@@ -5334,7 +5333,7 @@ var StepRunnerService = class StepRunnerService {
 					...secretEnv,
 					[FORCE_COLOR_KEY]: FORCE_COLOR_VALUE
 				},
-				shell: DEFAULT_SHELL
+				shell: this.runtime.workflowHost.shellPath
 			});
 			this.activeStep = {
 				command,
@@ -7245,7 +7244,11 @@ async function runWorkflowScript(runtime, request) {
 				}
 			}, PROCESS_GROUP_GRACE_MS);
 		});
-		child.stdin?.on("error", () => stop("Workflow script could not receive its input."));
+		const inputError = (error) => {
+			if (typeof error === "object" && error !== null && "code" in error && error.code === "EPIPE") return;
+			stop("Workflow script could not receive its input.");
+		};
+		child.stdin?.on("error", inputError);
 		child.stdout?.on("error", () => stop("Workflow script output stream failed."));
 		child.stderr?.on("error", () => stop("Workflow script diagnostic stream failed."));
 		child.stdout?.on("data", (chunk) => {
@@ -7288,8 +7291,8 @@ async function runWorkflowScript(runtime, request) {
 		else if (!child.stdin || !child.stdout || !child.stderr) stop("Workflow script requires piped input and output.");
 		else try {
 			child.stdin.end(input);
-		} catch {
-			stop("Workflow script could not receive its input.");
+		} catch (error) {
+			inputError(error);
 		}
 	});
 }
@@ -7412,6 +7415,36 @@ function failedExecution(error) {
 		stop: async () => void 0
 	};
 }
+const INPUT_TEMPLATE = /(?:\$\{\{|\{\{)[^}]*\binputs(?:\.|\[|\s)/u;
+const ENV_TEMPLATE = /(?:\$\{\{|\{\{)[^}]*\benv\.([^.}\s]+)/gu;
+/** Whether `value` expands an input into its text, directly or through an env key in `tainted`. */
+function expandsInput(value, tainted) {
+	const text = JSON.stringify(value ?? null);
+	return INPUT_TEMPLATE.test(text) || [...text.matchAll(ENV_TEMPLATE)].some((match) => tainted.has(match[1] ?? ""));
+}
+/**
+* Refuses a child job whose shell text would carry an input: a `run` that expands `inputs.*`, or
+* an `env.*` key whose job or step value does. Env values reach a command as its process
+* environment, never as command text, so an input there is safe until a `run` expands it.
+*/
+function assertStaticChildShell(definition) {
+	const jobTainted = /* @__PURE__ */ new Set();
+	for (const [key, value] of Object.entries(definition.env ?? {})) if (expandsInput(value, jobTainted)) jobTainted.add(key);
+	const check = (steps) => {
+		for (const step of steps) {
+			if (step.parallel) check(step.parallel);
+			if (step.run === void 0) continue;
+			const tainted = new Set(jobTainted);
+			for (const [key, value] of Object.entries(step.env ?? {})) if (expandsInput(value, jobTainted)) tainted.add(key);
+			if (expandsInput(step.run, tainted)) throw new Error("Child script inputs must arrive on stdin, never through shell interpolation.");
+		}
+	};
+	check([
+		...definition.preJob?.steps ?? [],
+		...definition.steps,
+		...definition.postJob?.steps ?? []
+	]);
+}
 /**
 * Runs workflow steps inside Po instead of a shell.
 *
@@ -7434,21 +7467,7 @@ function createStepExecutor(dependencies) {
 		const runtime = dependencies.runtime;
 		const workflow = child.context.config.workflow;
 		const parser = new WorkflowParserService(runtime);
-		const staticShell = (steps) => {
-			for (const step of steps) {
-				if (step.parallel) staticShell(step.parallel);
-				if (step.run !== void 0 && /(?:\$\{\{|\{\{)[^}]*\binputs(?:\.|\[|\s)/u.test(JSON.stringify({
-					run: step.run,
-					env: step.env,
-					jobEnv: child.definition.env
-				}))) throw new Error("Child script inputs must arrive on stdin, never through shell interpolation.");
-			}
-		};
-		staticShell([
-			...child.definition.preJob?.steps ?? [],
-			...child.definition.steps,
-			...child.definition.postJob?.steps ?? []
-		]);
+		assertStaticChildShell(child.definition);
 		const usages = [];
 		const evidence = [];
 		const logger = {
@@ -7474,7 +7493,7 @@ function createStepExecutor(dependencies) {
 			return {
 				completionGuarded: true,
 				completion: runWorkflowScript(runtime, {
-					command: "/bin/zsh",
+					command: runtime.workflowHost.shellPath,
 					args: ["-c", request.command],
 					cwd: request.cwd,
 					environment: {
@@ -7882,8 +7901,6 @@ function createStepExecutor(dependencies) {
 		}
 	};
 }
-/** The shell a command step runs in, the same one the engine spawns it with. */
-const STEP_SHELL = "/bin/zsh";
 /** Namespace for step pane sockets, apart from whole-run terminal sockets. */
 const STEP_PANE_SOCKET_SCOPE = "po-workflow-steps";
 const PANE_LOG_SUFFIX = ".log";
@@ -7919,7 +7936,7 @@ function createNativeStepPaneLauncher(runtime, service = new NativeTerminalServi
 		if (runtime.temporaryDirectory === void 0) throw new Error("Workflow step panes require an admitted temporary directory.");
 		if (!await service.available()) return void 0;
 		await service.spawn({
-			command: STEP_SHELL,
+			command: runtime.workflowHost.shellPath,
 			args: ["-c", request.command],
 			cwd: request.cwd,
 			env: { ...request.env },
@@ -10446,10 +10463,16 @@ function createWorkflowHost(options) {
 		...options,
 		environment: Object.freeze({ ...options.environment })
 	};
+	let shellPath = "/bin/sh";
+	try {
+		(0, node_fs.accessSync)("/bin/zsh", node_fs.constants.X_OK);
+		shellPath = "/bin/zsh";
+	} catch {}
 	return Object.freeze({
 		processId: process.pid,
 		executablePath: process.execPath,
 		platform: process.platform,
+		shellPath,
 		isElectron: Boolean(process.versions.electron),
 		writeStdout: (text) => {
 			process.stdout.write(text);
@@ -10830,7 +10853,7 @@ var BackgroundServiceManager = class {
 					...serviceEnv,
 					FORCE_COLOR: "1"
 				},
-				shell: "/bin/zsh",
+				shell: this.runtime.workflowHost.shellPath,
 				detached: true
 			});
 		} catch (error) {
@@ -10972,7 +10995,7 @@ var BackgroundServiceManager = class {
 		while (Date.now() - start < timeout) {
 			if (shouldAbort?.()) return false;
 			try {
-				await workflowShellOutput(this.runtime, `/bin/zsh -c ${require_workflowCommandTemplate.escapeShellArg(checkCmd)}`, {
+				await workflowShellOutput(this.runtime, `${require_workflowCommandTemplate.escapeShellArg(this.runtime.workflowHost.shellPath)} -c ${require_workflowCommandTemplate.escapeShellArg(checkCmd)}`, {
 					cwd: workDir,
 					environment: readyEnv,
 					timeoutMs: 5e3
@@ -13569,4 +13592,4 @@ Object.defineProperty(exports, "workflowShellOutput", {
 	}
 });
 
-//# sourceMappingURL=RecoverWorkflowService-CFiF9ZBU.cjs.map
+//# sourceMappingURL=RecoverWorkflowService-2WMhxaZd.cjs.map